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Fragmentize Source Address Ranges into Non-overlalpping 
Segments & Each Assigned an SASN Number 
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Fragmentize Destination Address Ranges into Non-overlalpping 
Segments & Each Assigned an DASN Number 
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Form a Two-dimensional Source-Destination 
Address Mapping Table 
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Fragmentize Source Port Ranges into Non-overlalpping 
Segments & Each Assigned an SPSN Number 



I 



125 



Fragmentize Destination Port Ranges into Non-overlalpping 
Segments & Each Assigned an DPSN Number 
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Form A Two-dimensional Source-Destination Port Mapping Table 
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Assign Policy Entry Counter in A Policy Table 
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Assign Policy Entry Counter Ip to Each SDAMT and SDPMT 
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Construct Policy Index Set To Form Policy Mapping Table 
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Construct Four Binary Trees 
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Parsing Incoming Packets to Extract Source/Destinaiton Address and Port Numbers 
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Find the SASN, DASN, SPSN & DPSN for Each Packet 
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Find ip(A) & ip(P) 
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Find Policy Entry Number for Each Incoming Packet 
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Figure 1 




Source Port Sequence Number 
Figure 5B 
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